Вакансии

Location: Hybrid - San Francisco, New York City, London About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Governance, Risk and Compliance (GRC) Analyst who wants to build GRC with AI, and you do not need to be an engineer to do it. We encourage and equip you to use AI tooling to build automations for audit evidence and customer security questionnaires, alongside assessing AI tools and vendors and managing audits. This is a hybrid role based in San Francisco, New York City, or London, with three days a week in the office. What you’ll do Assess AI tools and vendors against security, privacy, and compliance requirements, and run company compliance and ethics training Maintain the internal controls behind ISO 27001, System and Organization Controls 2 (SOC 2), Health Insurance Portability and Accountability Act (HIPAA), and Payment Card Industry Data Security Standard (PCI DSS) compliance, and drive remediation to completion with documented progress Use AI tooling to build automations that collect audit evidence, monitor controls, and draft security questionnaire responses, and report on controls maturity scores Manage annual audit deliverables, write treatment plans, and track completion across teams Answer customer compliance inquiries and maintain customer-facing security and compliance documentation What you need 3+ years supporting the audit lifecycle for SOC 2, ISO 27001, PCI DSS, or HIPAA in a cloud-based environment Applied security or privacy controls to AI systems or AI vendors, such as model access, data handling, or third-party risk review Built security policies and technical controls into the software development lifecycle (SDLC) with engineering partners Led compliance projects across multiple business units and seniority levels Bonus if you Built an automation or internal tool, with code or AI coding tools, even outside an engineering role Worked with AI governance frameworks such as ISO/IEC 42001 or the National Institute of Standards and Technology (NIST) AI Risk Management Framework Hold a Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), or Certified Compliance & Ethics Professional (CCEP) certification Compensation & Benefits: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $134,000-$202,000. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: United States Mattermost is the leading collaborative workflow platform for defense, intelligence, security, and critical infrastructure. Trusted by the U.S. Department of War and Fortune 500s, our platform runs on-premises and in private clouds, delivering secure messaging, file sharing, workflow automation, audio/screenshare, and project management—all with full data and operational control. Mattermost powers high-stakes workflows across mission planning, real-time, real-world operations, DevSecOps, incident response, and cyber defense—enabling secure collaboration from tactical edge and DDIL environments to enterprise HQ. Teams operate across web, desktop, and mobile, with embedded interoperability for Microsoft Teams, Outlook, and Microsoft 365. To learn more, visit www.mattermost.com Mattermost is hiring a GRC Manager to own and modernize our governance, risk, and compliance program across both federal and commercial markets. This is a program-ownership role for someone who brings a modern, engineering-led approach to compliance — harnessing GRC engineering and AI to reduce manual effort and scale our programs. You will own Mattermost's compliance posture end to end, accountable for our federal readiness and commercial certifications, and you will modernize how we run them: automated, continuously monitored, and AI-native. You will do the hands-on compliance work while coordinating across internal stakeholders in engineering, infrastructure, and IT who implement controls, the external auditors who assess them, and the customers whose trust rests on the outcome. As the program scales, you will grow and lead the team behind it. What You'll Do Own and modernize Mattermost's compliance programs across federal and commercial markets Lead readiness, certification, and surveillance cycles across both programs Operate the risk management program end to end — from identification and assessment through treatment and acceptance Own the third-party and vendor risk management program, including security assessments and supply chain risk Apply GRC engineering and automation to replace manual evidence collection with continuous controls monitoring Build AI-native workflows to accelerate and improve the quality of recurring compliance work Maintain the control library, system security plans, POA&Ms, and policies Coordinate external audits from scoping through remediation Accelerate deal cycles by owning customer security questionnaires, trust center content, and reusable compliance artifacts Grow and lead the GRC team as the program scales What We're Looking For Bachelor's degree in computer science, information security, or related field — or significant professional GRC and compliance experience Proven senior-level experience in governance, risk, and compliance, security compliance, or IT audit, including direct ownership of a certification or authorization program Experience with U.S. Federal standards including CMMC and NIST series (800-171 / 800-53) Experience with ISO 27001 and SOC 2 Type II Experience operating a formal risk management program Experience running a third-party and vendor risk management program Experience owning customer-facing security assurance, including security questionnaires and trust center content Working knowledge of security controls for cloud environments (AWS, GCP, and/or Azure) Excellent written and verbal communication skills Nice to Have Professional GRC certifications such as CISA, CRISC, CISM, CISSP, or CIPP Experience working with AI platforms such as Claude, OpenAI, or Gemini Experience with compliance automation tooling such as Vanta or Drata, and continuous controls monitoring Direct experience applying AI or LLM-based workflows to GRC tasks Proficiency in no-code automation or scripting languages Past success in critical infrastructure industries including defense, cybersecurity, communications, or manufacturing How Success Is Measured CMMC Level 2 gap assessment and readiness roadmap delivered within first 90 days SOC 2 Type II and ISO 27001 audit cycles completed on time without slippage Manual evidence collection replaced with automated, continuously monitored controls Customer security questionnaires and trust center content maintained to unblock deal cycles GRC team grown and operating as a scalable, program-driven function Why Mattermost Mission-driven work: Your contributions directly support the organizations and missions that depend on secure, reliable collaboration Remote-first culture: Work from anywhere with a globally distributed, high-trust team built for autonomy and ownership Open source at the core: Be part of a vibrant developer community shaping the future of secure collaboration AI-forward environment: We actively adopt and build AI-enabled workflows — you'll work with and on cutting-edge tooling Unique scope: Own the compliance program end to end across both federal and commercial markets at a high-growth Series B company Target Salary Range: $139,254-$168,318 Mattermost takes a market-based approach to pay and pay may vary depending on your location. The successful candidate’s starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future. Mattermost offers a remote-first work environment with medical, dental, and vision coverage. You’ll also receive unlimited PTO plus company holidays, a work from home stipend, an annual learning and development budget for conferences, certifications, and courses, paid parental leave for all parents, and a 401(k) plan. U.S. Eligibility & Compliance This role may require obtaining and maintaining a U.S. government security clearance. Candidates must meet federal eligibility requirements to be considered. For more information visit Security Clearances — United States Department of State Applicants must meet eligibility requirements for access to export-controlled information as defined by U.S. export control laws, including EAR and ITAR. For more information visit the Bureau of Industry and Security and the Directorate of Defense Trade Controls . Mattermost is an EEO Employer, we are a remote-first, open-source company. We are continually working to expand our hiring in more countries and regions, ensuring compliance with local laws and regulations, which takes time. Mattermost values your unique perspective—we welcome all applicants. We encourage individuals from all backgrounds to apply and are committed to assessing candidates based on their skills and qualifications. We do not tolerate discrimination against staff or applicants based on race, religion, national origin, age, disability, pregnancy status, veteran status, or other personal characteristics. If you require accommodations during the interview process, please let us know—we’re happy to assist.

Location: Metn, Lebanon The Company Toters is an on-demand e-commerce and delivery platform that enables customers to get anything in their city with the highest level of convenience. At Toters, technology is at the heart of everything we do. Our product teams build features that simplify customers’ lives, while our engineers create scalable solutions to deliver faster and more cost-effectively. If you thrive in a high-growth startup environment and want to help reshape how people shop across the Middle East, join us. Role Overview As a Senior Offensive Security Engineer (L5), you will own complex offensive security initiatives that span multiple teams. You will lead advanced penetration testing, red team exercises, and adversarial simulations to uncover systemic weaknesses in our web applications, APIs, mobile apps, cloud infrastructure, identity, payment-adjacent flows, and overall attack surface. You will act as a hands-on technical leader : influencing secure design decisions with evidence, mentoring mid-level and junior offensive engineers, and driving improvements that meaningfully reduce risk. Description In this senior role, you will take end-to-end ownership of offensive security efforts with a focus on high-impact outcomes. Your responsibilities include: Lead comprehensive penetration tests and red team / assumed-breach exercises targeting web applications, APIs, mobile applications, cloud infrastructure, and authentication systems (including identity and privileged-access paths). Lead mobile offensive testing on Android and iOS, including evaluation and bypass/validation of runtime protection, tamper resistance, certificate pinning / Certificate Transparency, and key/secret shielding using DexProtector or similar RASP / app-shielding tools, plus complementary tooling such as MobSF. Perform in-depth threat modeling and identify complex attack paths across services and trust boundaries (including authorization flaws, tenant isolation, token/session issues, edge/WAF bypass, and client-secret exposure). Deliver high-quality security assessment reports with clear risk ratings, business impact analysis, practical remediation guidance, and evidence quality that engineering and audit stakeholders can use in a SOC 2 and PCI DSS context—then re-test and validate fixes before closure. Collaborate with Engineering, DevOps, Product, and the Security Engineer track to influence secure architecture decisions and ensure vulnerabilities are addressed at the root cause. Develop and improve offensive security methodologies, tools, and automation to increase efficiency and coverage. AI-assisted testing is a must. Mentor mid-level and junior offensive security engineers, conduct offensive-focused code/design reviews, and help raise the overall security capability of the team. Participate in purple team exercises with the detection and incident response teams to improve defenses based on real attack simulations. Stay at the forefront of offensive security research, emerging threats, and TTPs, and assess their relevance to Toters. Contribute offensive input to security standards, policies, and secure development practices across the engineering organization (you advise; you do not own policy issuance or GRC evidence packs). Support structured disclosure (VDP / researcher reports) through reproduce, rate, de-duplicate, and validate. Key Qualifications Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. 6+ years of hands-on experience in offensive security, penetration testing, or red teaming. Strong expertise in web application, API, and mobile security testing (Android and iOS). Working knowledge of DexProtector or similar mobile shielding / RASP tooling: what it protects, how testers evaluate residual risk, and how to validate that hardening holds. Advanced proficiency with offensive security tools (Burp Suite, Metasploit, Cobalt Strike or equivalent adversary-emulation platforms, custom tooling, etc.). Proficient in writing robust, reusable scripts and small tools for automation (Python preferred, Bash for quick tasks). Solid experience with cloud security testing (AWS preferred) and infrastructure attack techniques. Proven ability to lead complex security assessments from scoping to reporting and remediation validation. Strong risk assessment and threat modeling skills, with the ability to communicate technical risks clearly to both technical and non-technical stakeholders. Familiarity with SOC 2 and PCI DSS as they apply to offensive work (scoped pentests, application/API/payment-adjacent testing, evidence-quality reporting). This role does not own control design or audit evidence collection. Experience mentoring engineers and influencing cross-team security practices. Excellent written and verbal communication skills in English. Nice to Have Industry-recognized certifications such as OSCP, OSCE, OSEP, CRTO, or PNPT. Experience running full-scope red team or assumed-breach exercises. Experience developing custom exploits, tooling, or automation for offensive security. Knowledge of MITRE ATT&CK and adversary emulation. AI and AI pentesting: testing LLM/agent applications (prompt injection, tool/plugin abuse, data-exfil via agents) and using AI-assisted pentest workflows with mandatory human review. Previous experience in high-scale e-commerce, delivery, or fintech environments, including payment API / tokenization / third-party PSP testing as a tester (not as PCI control owner). Fluency in Arabic and English (French is a plus). What We Offer Competitive compensation package. Discounts on Toters orders. First-class medical insurance. Ready to own offensive security at scale and help build a safer platform for millions across the Middle East? Apply now!

Location: US / Remote Workplace: remote About the Company Born from groundbreaking research at Columbia University and Yale University, CertiK is a leading Web3 security company focused on securing blockchain protocols, smart contracts, and decentralized applications through cutting-edge security research, formal verification, and AI-powered technology. Founded in 2017 and headquartered in New York City, CertiK provides end-to-end security solutions including smart contract audits, penetration testing, on-chain monitoring, incident response, and compliance services for some of the largest projects in the digital asset ecosystem. Today, CertiK supports thousands of enterprise clients and Web3 projects globally, with a distributed international team spanning North America, Asia, and Europe. The company is backed by leading investors including Coatue, Goldman Sachs, Insight Partners, and Sequoia Capital, and has been recognized by organizations such as the World Economic Forum and CB Insights for its contributions to blockchain security innovation.   About This Role This role is for a Web3 security researcher who can act as a public face for CertiK. This means having a strong social media presence, speaking at conferences, and being openly helpful to the wider security community. This doesn't mean you have to have tens of thousands of followers on X, but you do need to be comfortable interacting with the general public. The specific type of security researcher is flexible - contract/chain auditors, pen testers, engineers, and multi-talented individuals can apply. This is a great role for a generalist. Responsibilities Work closely with the Web3 Task Force Team to create stronger connections to the blockchain ecosystem. Speak at conferences about your area of expertise on behalf of CertiK. Complete interviews about various Web3 security topics. Perform tasks cross-functionally among the various teams at CertiK. Support the marketing and feedback collection of CertiK’s products and services. Requirements 3+ years of experience in the Web3 space. Strong social media presence and high visibility. Experience speaking at conferences or in front of large audiences. Strong technical skills in the areas of web3 security or related fields. Bonus Points Large number of social media followers. Previous experience being the public face of an organization.

Location: Spain; United Kingdom; Serbia; Germany Who we are Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes—it just works and is always free for the first 200 endpoints with no functional limits. By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience. In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America . The company is founder-led by Alex Vovk and Mike Walters , entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company. The Role We are looking for a Product Security Engineer to join the team responsible for securing Action1’s multi-tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable. This is a hands-on role for someone who understands both software engineering and cybersecurity, enjoys working directly with developers, and wants to help build security into the product without slowing teams down unnecessarily. What you’ll do Support PSIRT and vulnerability handling activities Validate, triage, track, and coordinate security reports Provide practical remediation guidance to engineering teams Help validate security fixes and reduce product security risks Review code, APIs, and architecture to identify security issues early Conduct threat modeling and security design reviews Improve security automation in engineering workflows Support SAST, SCA, secrets scanning, and other security controls Maintain SBOMs, dependency visibility, and remediation follow-up Support security assessments, vulnerability assessments, and penetration testing Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks What we’re looking for 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field Strong software engineering background and ability to work effectively with engineering teams Understanding of application, API, infrastructure, and software supply chain security risks Experience applying cloud security concepts and practices Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices Experience with threat modeling and security design reviews Strong communication skills, including professional communication with external researchers and vendors Ability to work independently and as part of a team in a fast-moving environment Nice to have Genuine interest in cybersecurity and motivation to grow as a product security expert Hands-on experience with AWS security controls, best practices, and architecture patterns Hands-on experience with C++ or JavaScript Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools Experience with threat modeling for SaaS, API, cloud, or on-prem product components Experience with SBOM generation, dependency visibility, or software supply chain security What we offer Fully remote work environment Opportunity to work on a real security product used by IT and security teams High ownership and direct impact on product security practices Close collaboration with engineering, product, and security teams Fast-growing software company with low bureaucracy and practical decision-making Opportunity to improve security processes, automation, and engineering workflows Supportive team that values clear thinking, ownership, and continuous learning

Location: London, England Fin , now part of Salesforce, is on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system. Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI. Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape. What will I be doing? Design and implement secure cloud architectures across our AWS environments. Build and maintain protective and detective controls that improve visibility into threats across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents. Build automation that improves the scalability, reliability, and effectiveness of security controls. Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices. Develop and improve cloud security standards, guidance, and best practices across Fin. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Assess emerging threats to cloud environments and help evolve our defensive capabilities. Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities. Support the secure adoption of AI-assisted software development tools and engineering workflows. What skills do I need? Proven experience in cloud security, security engineering, detection engineering, or a closely related field. Strong experience securing and operating production AWS environments. Deep understanding of cloud security principles, modern attack techniques, and security best practices. Experience building or operating detection, monitoring, or threat detection capabilities. Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts. Experience implementing security controls across cloud platforms and production environments. Strong programming skills and experience building automation, tooling, or operational workflows. Experience working with infrastructure-as-code practices and modern cloud-native technologies. Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness. Ability to communicate security concepts clearly and collaborate effectively with engineering teams. A pragmatic approach to balancing security, customer impact, and engineering velocity. Bonus skills & attributes Experience building detection engineering, threat hunting, or security operations capabilities at scale. Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring. Experience applying AI to detection, response, threat analysis, or security operations workflows. Familiarity with AWS networking, identity, and cloud security patterns. Experience working across both large-scale SaaS environments and high-growth companies. #LI-Hybrid Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at fin.ai/careers . Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. Policies Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week. We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values . Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Location: Dublin, Ireland Fin , now part of Salesforce, is on a mission to help businesses provide perfect customer experiences. Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey, from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk, giving modern support teams one single system. Together with Salesforce, the #1 AI CRM, where humans with agents drive customer success, we're building the future of customer experience. Here, ambition meets action. Tech meets trust. And innovation isn't a buzzword, it's a way of life. The world of work as we know it is changing, and we're looking for Trailblazers who are passionate about bettering business and the world through AI. Ready to level up your career at the company leading workforce transformation in the agentic era? You're in the right place. Agentforce is the future of AI, and you are the future of Salesforce. What's the opportunity? Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission. The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction. The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape. What will I be doing? Design and implement secure cloud architectures across our AWS environments. Build and maintain protective and detective controls that improve visibility into threats across our cloud environments. Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response. Lead cloud security investigations and incident response activities in partnership with engineering teams. Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents. Build automation that improves the scalability, reliability, and effectiveness of security controls. Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices. Develop and improve cloud security standards, guidance, and best practices across Fin. Drive security initiatives from problem definition through design, implementation, and measurable outcomes. Assess emerging threats to cloud environments and help evolve our defensive capabilities. Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities. Support the secure adoption of AI-assisted software development tools and engineering workflows. What skills do I need? Proven experience in cloud security, security engineering, detection engineering, or a closely related field. Strong experience securing and operating production AWS environments. Deep understanding of cloud security principles, modern attack techniques, and security best practices. Experience building or operating detection, monitoring, or threat detection capabilities. Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts. Experience implementing security controls across cloud platforms and production environments. Strong programming skills and experience building automation, tooling, or operational workflows. Experience working with infrastructure-as-code practices and modern cloud-native technologies. Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness. Ability to communicate security concepts clearly and collaborate effectively with engineering teams. A pragmatic approach to balancing security, customer impact, and engineering velocity. Bonus skills & attributes Experience building detection engineering, threat hunting, or security operations capabilities at scale. Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring. Experience applying AI to detection, response, threat analysis, or security operations workflows. Familiarity with AWS networking, identity, and cloud security patterns. Experience working across both large-scale SaaS environments and high-growth companies. #LI-Hybrid Unleash Your Potential When you join Salesforce, you’ll be limitless in all areas of your life. Our benefits and resources support you to find balance and be your best, and our AI agents accelerate your impact so you can do your best. Together, we’ll bring the power of Agentforce to organizations of all sizes and deliver amazing experiences that customers love. Apply today to not only shape the future — but to redefine what’s possible — for yourself, for AI, and the world. In the United States, compensation offered will be determined by factors such as location, job level, job-related knowledge, skills, and experience. Certain roles may be eligible for incentive compensation, equity, and benefits. At Fin, we want to give people what they need to do the best work of their careers. Our benefits and programs are designed to support your health and wellbeing, your family, your time away from work, and your financial future. Offerings vary by location in line with local practices and requirements. Learn more about working at Fin and the benefits we offer at fin.ai/careers . Pursuant to the San Francisco Fair Chance Ordinance and the Los Angeles Fair Chance Initiative for Hiring, Salesforce will consider for employment qualified applicants with arrest and conviction records. Policies Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week. We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values . Salesforce is an equal opportunity employer and maintains a policy of non-discrimination with all employees and applicants for employment. What does that mean exactly? It means that at Salesforce, we believe in equality for all. And we believe we can lead the path to equality in part by creating a workplace that’s inclusive, and free from discrimination. Know your rights: workplace discrimination is illegal. Any employee or potential employee will be assessed on the basis of merit, competence and qualifications – without regard to race, religion, color, national origin, sex, sexual orientation, gender expression or identity, transgender status, age, disability, veteran or marital status, political viewpoint, or other classifications protected by law. This policy applies to current and prospective employees, no matter where they are in their Salesforce employment journey. It also applies to recruiting, hiring, job assignment, compensation, promotion, benefits, training, assessment of job performance, discipline, termination, and everything in between. Recruiting, hiring, and promotion decisions at Salesforce are fair and based on merit. The same goes for compensation, benefits, promotions, transfers, reduction in workforce, recall, training, and education.

Обязанности: • Работать с системами информационной безопасности (SIEM, SOAR/IRP, NTA) • Заниматься мониторингом и анализом событий ИБ • Регистрировать инциденты ИБ и доводить их до закрытия • Взаимодействовать с коллегами. Требования: • Знание современных тактик и техник атакующих, основных векторов атак на корпоративные инфраструктуры, способов их обнаружения и противодействия; • Опыт работы с KSC, IRP/SOAR системами; • Понимание работы SOC (Security Operation Center) • Понимание работы средств защиты информации (FW, IDS/IPS, АВЗ, SIEM и пр.); • Ответственный подход к решению задач, способность работать в режиме многозадачности; • Высшее техническое образование (ИБ или ИТ); • Опыт работы не менее года. Условия: • Работу в федеральной компании стратегического масштаба; • Сменный график работы (сутки/трое) в комфортных условиях • Широкий стек технологий и проектов, возможность гибко строить свой карьерный трек; • Зарплату, соответствующую опыту и навыкам, прозрачную систему мотивации; • Поддержку профессионального развития - курсы и тренинги внутри департамента; • Расширенный пакет ДМС со стоматологией; • Корпоративная профсоюзная программа; • Комфортный офис рядом с м. ВДНХ; • Материальную помощь к отпуску, конкурентоспособную систему премирования.

Location: Hybrid - San Francisco, New York City About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We are looking for a Product Security Engineer to build the systems that triage and validate bug bounty and other externally reported security findings, not to work the queue. This role suits a software engineer moving into security or a security engineer with a strong engineering background. You will build large language model (LLM) and agent-based tooling that validates findings, traces them to their root cause, and opens fixes for well-understood vulnerability classes. This is a hybrid role based in San Francisco or New York City, with three days a week in the office. What you’ll do Build the systems that take in externally reported vulnerabilities and assess validity, severity, and reproducibility at a volume manual triage cannot match Build LLM and agent-based analysis that validates business logic, authentication, and design-level findings, not just known signatures Build systems that trace validated findings to their root cause and propose, and increasingly open, fixes for well-understood vulnerability classes, with human review gates Own the bug bounty program, including scope, policy, and researcher engagement, and feed every resolved report back into automated triage Extend the tooling into security testing capabilities that customers can use on what they build and deploy What you need 5+ years of software engineering or security engineering experience, building and shipping production systems or internal tools Wrote production code in JavaScript/TypeScript on Node.js, with hands-on experience in web frameworks such as Next.js or React Built with LLM or agent-based tooling Reproduced and assessed externally reported vulnerabilities, including judging severity Bonus if you Built security automation used across an engineering org, not just for your own team Built systems that auto-generate or propose code fixes, not just findings Tested or secured multi-tenant platforms where customer-built applications run on shared infrastructure Compensation & Benefits: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. Actual salary will be based on job-related skills, experience, and location. Compensation outside of San Francisco may be adjusted based on employee location. The total compensation package may include benefits, equity-based compensation, and eligibility for a company bonus or variable pay program depending on the role. Your recruiter can share more details during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: Remote - United States About Vercel: Vercel is the agentic infrastructure company, freeing people and agents to ship what's next. For more than a decade we've helped builders move from idea to production with speed, security, and exceptional developer experience. Now we're scaling our products for both agents and people to ship and run software, built in the open and trusted by OpenAI, PayPal, Ramp, Supreme, and millions of developers worldwide. About the role We're looking for a Security Engineer to join our Cloud Security Engineering team. In this role, you'll help strengthen the security of our platform by building and improving the controls that protect our infrastructure. You'll play a key role in making security a core part of how we build, deploy, and scale our systems, while helping the company grow securely and confidently. You'll report to the Security Operations Manager, and this is a hybrid or fully remote within the United States. If you're based within commuting distance of our SF or NY offices, the role includes in-office anchor days on Monday, Tuesday, and Friday. What you'll do Design and implement scalable security controls across our cloud-native platform. Harden infrastructure components using infrastructure-as-code, policy enforcement, and service isolation. Build secure by default infrastructure and code CI/CD pipelines. Collaborate with platform and infrastructure teams to integrate security best practices into architecture and workflows. Stay ahead of cloud security trends and adopt cutting-edge technologies to enhance platform resilience. Conduct threat modeling, risk analysis, and mitigation planning for critical systems. Drive improvements in monitoring, detection, and incident response at the platform level. Build, deploy and maintain relevant tooling. What you need 8+ years of experience in infrastructure or platform security roles. Deep understanding of secure cloud infrastructure (AWS/GCP), identity and access management, and system hardening. Proficient with tools like Terraform, CDK, Kubernetes, and CI/CD security. Skilled at balancing engineering realities with principled security practices. Proven track record of shipping secure, resilient systems at scale. Bonus if you Have built or scaled security automation pipelines. Contributed to open-source security projects or tools. Hold certifications such as GCP Security Engineer, AWS certifications, CISSP, or OSCP. Hold a bachelor's or master's degree in Cybersecurity or similar disciplines. Benefits & Compensation: Competitive compensation package, including equity. Inclusive Healthcare Package. Learn and Grow - we provide mentorship and send you to events that help you build your network and skills. Flexible Time Off. We will provide you the gear you need to do your role, and a WFH budget for you to outfit your space as needed. The San Francisco, CA base pay range for this role is $208,000.00 - $312,000.00. This salary range is an estimate. Actual salary will be based on job related skills, experience and location. Pay ranges outside San Francisco may be adjusted based on employee location. The total compensation package also includes benefits and equity-based compensation. Your recruiter can share more about the specific pay range for your location during the hiring process. Disclosures: Privacy: Please review our Job Applicant Privacy Policy for more information on how we handle your data. Equal Opportunity: Vercel is committed to fostering and empowering an inclusive community within our organization. We do not discriminate on the basis of race, religion, color, gender expression or identity, sexual orientation, national origin, citizenship, age, marital status, veteran status, disability status, or any other characteristic protected by law. Vercel encourages everyone to apply for our available positions, even if they don't necessarily check every box on the job description.

Location: London DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. We are seeking a Network Security Engineer to join the network security team to ensure that our infrastructure and networks are properly protected. They will design, coordinate and implement security controls, audit configurations, and design networks in a hybrid compute environment. A successful candidate will have an attention to detail, the ability to understand what impacts their changes have on the network and relevant associated services. What you’ll be doing: Collaborate with cross-functional security, technology, and trading teams to design and deploy innovative solutions that enhance both system integrity and trading performance. Actively contribute to the design, implementation, and maintenance of mission-critical trading infrastructure that drives resilient and scalable market operations. Implement robust strategies to reduce network risks by leveraging micro-segmentation, port-based security, and other innovative methods. Evaluate, diagnose, and implement effective network security solutions such as firewalls, network detect and response, intrusion prevention systems (IPS), and VPN concentrators to improve our network security and ensure reliable remote access. Leverage automation, AI, and other emerging and innovative technologies to continuously enhance our ability to detect and respond to security events. Perform in-depth analysis of network packet captures to investigate security incidents and identify areas for improvement. Continuously seek opportunities to automate tasks and streamline security operations for improved efficiency and effectiveness. What we’re looking for: You are passionate about network security You are a network security engineer who thrives on designing, implementing, and supporting cutting-edge security systems that keep our network safe from emerging threats. You are able to get your hands dirty with hands-on experience in firewalls, client VPNs, SASE, NDR, and IDS solutions. You enjoy scripting and coding to automate processes and reduce repetitive work You have a solid understanding of TCP, UDP, IP, the OSI Model, and Layer 1/2/3 principles. You are a dedicated professional who isn’t afraid of stepping up for on-call duties—even if it means working nights or weekends You are someone that continuously seeking innovative improvements to drive high-quality, state-of-the-art, and effective security solutions. You are an effective communicator, able to translate complex technical insights into clear, actionable strategies that resonate with cross-functional teams. For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice . California residents, please review the California Privacy Notice for information about certain legal rights at https://drw.com/california-privacy-notice . #LI-MM1

Location: Dublin Workplace: onsite Larian Studios is looking for a motivated and hands-on Junior Security Engineer to help strengthen and support the security posture of our global studio environment. This role is ideal for someone early in their cybersecurity career who wants exposure to infrastructure security, vulnerability management, monitoring, and operational security within the gaming industry.   You will work closely with IT, infrastructure, and development teams to support security operations, investigate threats, improve security controls, and help maintain best practices across the organisation. Responsibilities Assist in identifying, assessing, and mitigating vulnerabilities across infrastructure and applications Support the deployment and operation of security tools across multiple systems and environments Perform security monitoring, vulnerability scanning, and assist with log analysis to detect incidents and threats Support technical security audits and help provide actionable recommendations Assist in maintaining secure baseline configurations for Windows and Linux systems Participate in incident handling and escalation procedures Help educate staff on information security best practices Research and learn new technologies, tools, and security techniques Maintain up-to-date security documentation and operational procedures Participate in change management workflows to support secure implementations Requirements 1–3 years of experience in IT, infrastructure, or cybersecurity-related roles Basic understanding of cybersecurity principles and industry best practices Familiarity with vulnerability scanning or security monitoring tools Basic understanding of Windows and Linux operating systems Basic exposure to scripting or automation tools such as PowerShell, Bash, or Python Strong troubleshooting and analytical skills Good written and verbal communication skills in English Passion for cybersecurity and willingness to learn Ability to work collaboratively within a team environment This is a full-time, on-site role, requiring your presence in the office to support collaboration and creativity Nice to Haves Exposure to SIEM, IDS/IPS, endpoint protection, or vulnerability management tools Interest in learning security automation and scripting Experience supporting multi-site or international environments Cloud platform exposure (AWS, Azure, or GCP) Interest in gaming or gaming industry environments Understanding of networking fundamentals What we offer An international team of over 500 employees spread across 7 studios around the world, each of which have their own unique qualities, and maintain a small-studio feel An open, collaborative environment where ideas are welcome and encouraged A managerial team consisting of highly experienced game developers at the top of their fields Sharing hobbies and passions with like-minded colleagues Inclusive environment with many activities organized by the studios or the employees Commitment to making the best game possible for the fans, including listening to community feedback

Location: CH - Zurich, Switzerland The Security Team of Scopely Explore (formerly known as Niantic) seeks a Senior Security Engineer to improve the security posture of our software development lifecycle, applications, and build infrastructure. Scopely Explore, known for global hits like Pokémon GO, Monster Hunter Now, and Pikmin Bloom is now part of Scopely, home to games like Monopoly GO!, Stumble Guys, and Star Trek Fleet Command. Together, we engage billions of players worldwide, and we need your expertise to keep them safe! Do you want to help secure one of the most widely used gaming platforms on the planet? We seek creative and dedicated engineers with excellent technical judgment, strong interpersonal skills, and an eagerness to embrace new technologies. What You’ll Do Implement and maintain agentic or AI-enabled workflows to speed-up common security tasks. Perform security reviews and audits of platform and application software throughout design and launch. Provide guidance and expertise to product and operations teams across Scopely. Design, build and maintain automation and tooling that amplify the Security Team’s impact and improve the developer experience. Drive initiatives in security architecture, application scanning, fuzzing, and other proactive defenses. Contribute to hardening efforts across in-house libraries, CI/CD systems, and cloud/container environments. Be responsible for third-party library reviews and manage vulnerability remediation. Educate engineers on secure coding practices and help standardize security across teams. Engage in red-team exercises and coordinate with internal teams and external pentesting partners. Qualifications Bachelors in Computer Science or related field 5+ years of experience in a global company with cloud-centric infrastructure (preferably GCP). You have implemented services and applications with the help of AI tools like Claude, Codex, OpenCode or Gemini and are adept in the use of these tools and adjacent technologies (RAG, MCP, etc). You are capable of creating automation, agentic workflows and tooling to reliably solve problems that scale to the whole enterprise. You have in-depth experience in hardening distributed web services, cloud services and platform architectures. You can demonstrate strong programming skills (preferably Go or Java) and a deep understanding of common vulnerability classes and exploitation patterns across modern stacks. Excellent communication skills and experience collaborating across distributed teams. Bonus Points... Have participated in red-team operations or managed mitigation tracking. Possess deep familiarity with build systems, artifact repositories, or large-scale infrastructure. Have delivered privacy-focused solutions for user-facing services. Have experience in code quality management or security champion programs. Have worked in a customer-centric engineering culture and value pragmatic, scalable solutions. Can demonstrate hands-on experience or research in the area of AI security and safety. About Scopely Scopely is a leading video game and global interactive entertainment company, home to many of the world’s most beloved and enduring experiences, including two of the most successful mobile games of all-time “MONOPOLY GO!” and “Pokémon GO,” along with “Stumble Guys,” “Star Trek™ Fleet Command,” “MARVEL Strike Force,” “WWE Champions,” the Scrabble® franchise, “Yahtzee® With Buddies,” and many others. Across mobile, web, PC, and console, Scopely creates, develops, publishes, and live-operates one of the most diversified and award-winning portfolios in the games industry — bringing hundreds of millions of players together through a shared love of play. Founded in 2011, Scopely is powered by its exceptional team — including thousands of world-class gamemakers around the globe, a distinctive tenet-driven culture, and its proprietary technology platform, Playgami. Together, these strengths have fueled Scopely’s position as the #1 mobile games company in the U.S. and #2 globally, generating more than $10 billion in lifetime revenue. Whether building global sensations like “MONOPOLY GO!” from the ground up, or expanding through strategic acquisitions, including the FoxNext, GSN, and Scopely Explore games businesses — Scopely consistently delivers experiences players love today and return to for years to come. Recognized multiple times as one of the "100 Most Influential Companies in the World" by TIME magazine and one of Fast Company's "World's Most Innovative Companies" and “Best Workplaces for Innovators,” Scopely believes that video games can be a force for good — creating meaningful connections, vibrant communities, and making life better through play. Scopely has global operations and partners across four continents in more than a dozen countries worldwide. For more information, visit: https://www.scopely.com/ . Notice to Candidates: Scopely will never request payment or financial information during the application or hiring process. Please apply only through our official website and verify that all Talent Partner communications come from an email address ending in @ scopely.com . Should you have any questions or encounter any fraudulent requests/emails/websites, please immediately contact recruiting@scopely.com. Our job applicant privacy policies are available here: California Privacy Notice and EEA/UK Privacy Notice . Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.

Обязанности: • Работать с системами информационной безопасности (SIEM, SOAR/IRP, NTA) • Заниматься мониторингом и анализом событий ИБ • Регистрировать инциденты ИБ и доводить их до закрытия • Взаимодействовать с коллегами. Требования: • Знание современных тактик и техник атакующих, основных векторов атак на корпоративные инфраструктуры, способов их обнаружения и противодействия; • Опыт работы с KSC, IRP/SOAR системами; • Понимание работы SOC (Security Operation Center) • Понимание работы средств защиты информации (FW, IDS/IPS, АВЗ, SIEM и пр.); • Ответственный подход к решению задач, способность работать в режиме многозадачности; • Высшее техническое образование (ИБ или ИТ); • Опыт работы не менее года. Условия: • Работу в федеральной компании стратегического масштаба; • Сменный график работы (сутки/трое) в комфортных условиях • Широкий стек технологий и проектов, возможность гибко строить свой карьерный трек; • Зарплату, соответствующую опыту и навыкам, прозрачную систему мотивации; • Поддержку профессионального развития - курсы и тренинги внутри департамента; • Расширенный пакет ДМС со стоматологией; • Корпоративная профсоюзная программа; • Комфортный офис рядом с м. ВДНХ; • Материальную помощь к отпуску, конкурентоспособную систему премирования.

Location: Hong Kong, Hong Kong SAR Who We Are At OKX, we believe that the future will be reshaped by crypto, and ultimately contribute to every individual's freedom. OKX is a leading crypto exchange, and the developer of OKX Wallet, giving millions access to crypto trading and decentralized crypto applications (dApps). OKX is also a trusted brand by hundreds of large institutions seeking access to crypto markets. We are safe and reliable, backed by our Proof of Reserves. Across our multiple offices globally, we are united by our core principles: We Before Me , Do the Right Thing , and Get Things Done . These shared values drive our culture, shape our processes, and foster a friendly, rewarding, and diverse environment for every OK-er. About the Opportunity We are looking for a Security Operations Engineer who combines hands-on engineering skills with security operations expertise. You will be deeply involved in the operations and troubleshooting of both server-side and client-side components within our Zero Trust architecture, drive security risk governance initiatives, and leverage AI tools to continuously improve system stability and compliance. Key Responsibilities K8s Operations & Vendor Engagement: Develop deep expertise in K3s / Kubernetes, including version management and disaster recovery. Independently identify and reproduce system issues, proactively engage with vendors to drive root cause analysis and resolution — not just workarounds. Zero Trust Network Access Governance: Work closely on Zero Trust initiatives, participate in cluster network configuration and troubleshooting, identify device compliance risks, drive remediation of non-compliant devices, and continuously optimize access control policies. Monitoring & Observability: Build and continuously improve log monitoring systems; proactively surface system risks through alert rules and trend analysis. AI Agent Implementation: Lead the adoption of AI Agents in security operations — design and deploy AI Agent workflows for log analysis, alert triage, and automated incident remediation (e.g., Multi-step Agents using Claude / GPT with tool-calling), reducing manual intervention and improving response efficiency. Requirements Must Have Solid understanding of Kubernetes / K3s core concepts; able to independently diagnose cluster-level issues. Foundational knowledge of security principles and Zero Trust model; strong networking fundamentals with the ability to independently troubleshoot and analyze network connectivity issues. Hands-on experience with AI tools (e.g., Claude, Codex, or equivalents) for day-to-day tasks including log analysis, scripting, fault diagnosis, and documentation. Bachelor's degree or above in Computer Science, Information Security, Network Engineering, or a related field; 3–5 years of relevant experience. Nice to Have Experience with DACS / NAC or similar device access control system operations or risk governance. Familiarity with monitoring and logging platforms such as Prometheus + Grafana, ELK, or Loki. Hands-on experience building AI Agents or implementing tool-calling workflows. Proven track record of collaborating with external vendors to drive issue resolution. Who You Are AI-Forward: You actively explore and integrate AI tools into your daily workflow to boost efficiency. Owner Mindset: You take genuine ownership of system health — you don't just close tickets. Strong Communicator & Driver: You can clearly articulate technical issues and effectively push cross-functional teams and vendors toward resolution. Self-Starter: You don't wait to be told — you proactively spot problems and drive them to closure. Perks & Benefits Competitive total compensation package L&D programs and Education subsidy for employees' growth and development Various team building programs and company events Wellness and meal allowances Comprehensive healthcare schemes for employees and dependants More that we love to tell you along the process! Please note that Hong Kong is a group-level service hub, and OKX does not carry on a business of operating a virtual asset trading platform in Hong Kong. Notice: All official OKX vacancies are published on this website. While roles may appear on selected third-party platforms from time to time, information on other sites may be inaccurate or outdated. If in doubt, please apply directly through our official careers website. Information collected and processed as part of the recruitment process of any job application you choose to submit is subject to OKX 's Candidate Privacy Notice .

Location: Vancouver, BC Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Vancouver office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do and the teams with which you partner. If you're interviewing for this role, your recruiter will share more about the in-office requirements. What you'll achieve: Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents. Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments. Investigate and contain software supply chain and CI/CD incidents , from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI). Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms. Conduct proactive threat hunting and operationalize threat intelligence across cloud, endpoint, and identity telemetry to catch threats beyond standard SIEM alerting. Conduct forensic analysis during security incidents to understand the scope and impact of incidents. Collaborate with engineering teams to integrate security best practices into development processes and provide guidance on secure configurations. Develop and deliver training to educate engineers on security operations and incident response best practices. About you: 8+ years of experience in threat detection, security operations, or incident response , including investigating incidents across cloud platforms, identity providers, and SaaS applications, with practical knowledge of audit logging and IAM. Proficient in Python ( Bash, Go, or JavaScript/TypeScript is a plus ) for security scripting and automation , with hands-on experience across REST APIs, Git workflows, and PR-based code reviews . Hands-on experience investigating software supply chain threats , with fluency in auditing modern developer ecosystems (e.g., npm, PyPI), build logs, and CI/CD pipelines. Familiarity with "Detection as Code" methodologies , including test-driven detection logic and rule management through CI/CD pipelines. Strong experience with SIEM platforms (e.g., Panther, Splunk, Elastic Security) for log analysis, alert correlation, and dashboard creation. Deep working knowledge of endpoint detection and response (EDR) tools (e.g., CrowdStrike, SentinelOne) with specialized expertise in macOS endpoint security, telemetry, and threat detection capabilities . Experience performing digital forensics and root-cause analysis to determine incident scope and impact. Familiarity with common attack techniques, tactics, and procedures (TTPs) and frameworks like MITRE ATT&CK. Collaborative and pragmatic, with strong communication skills across technical and non-technical partners, committed to building robust defenses and helping engineers do their best, most secure work . Demonstrated curiosity about AI tools and emerging technologies, with a willingness to learn and leverage them to enhance productivity, collaboration, or decision-making. What we offer: Our comprehensive compensation package plays a big part in how we recognize you for the impact you have on our path to achieving our mission. We believe that compensation should be reflective of the value you create relative to the market value of your role. To ensure pay is fair and not impacted by biases, we're committed to looking at market value which is why we check ourselves and conduct a yearly pay equity audit. For this role, the estimated base salary range is between CAD $200,000-$240,000. The actual base salary will vary based on various factors, including market and individual qualifications objectively assessed during the interview process. The listed range above is a guideline, and the base salary range for this role may be modified. In addition to base salary, your compensation package may include additional components such as equity, sales incentive pay (for most sales roles), and benefits. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role. We strive to provide equitable and competitive benefits packages that support our employees worldwide and include: Mental health, wellness & fitness benefits Career coaching & support Inclusive family building benefits Long-term savings or retirement plans In-office culinary options to cater to your dietary preferences These are just some of the benefits we offer, and benefits may vary based on role, country, and local regulations. If you're interviewing for this role, speak with your Talent Acquisition Partner to learn more about the total compensation and benefits for this role. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. #LI-Hybrid About us Asana is a leading platform for human + AI collaboration. Millions of teams around the world rely on Asana to achieve their most important goals, faster. Asana has been named to Fortune's Best Workplaces for 7+ years and recognized by Fast Company, Forbes, and Gartner for excellence in workplace culture and innovation. We offer an exceptional office-centric culture while adopting the best elements of hybrid models to ensure that every one of our global team members can work together effortlessly. With 13+ offices all over the world, we are always looking for individuals who care about building technology that drives positive change in the world and a culture where everyone feels that they belong. We believe in supporting people to do their best work and thrive. Our goal is to ensure that Asana upholds an environment where all people feel that they are respected and valued, whether they are applying for an open position or working at the company. We provide equal employment opportunities to all applicants without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by law. Join Asana’s Talent Network to stay up to date on job opportunities and life at Asana.

Location: Remote - Colombia ; Remote - Costa Rica ; Remote - Mexico Backblaze is the object storage leader in the open cloud movement, fueling customer success with cloud storage built purposefully to unlock budgets, unburden administrators, and unleash innovators. Together with our partners, we’re helping customers break free from the restrictive, overpriced legacy solutions that hold them back, and blaze forward with the full power of the open cloud in their hands. Founded in 2007, we scaled the business with less than $3 million in outside funding until 2021, when we did a traditional IPO on the Nasdaq stock exchange. Today, Backblaze generates over $100m in revenue and is the leading specialized storage cloud - managing over three billion gigabytes of data storage for 500K+ customers in 175+ countries, including businesses, developers, IT professionals, and individuals. But while there is a lot to celebrate in our past, there is almost as much opportunity ahead of us. We are seeking a Sr. AI Security Engineer to join our team! About The Role Backblaze is seeking a Senior AI Security Engineer to design and implement safeguards for internal AI usage , with a focus on agentic systems, developer protection, and runtime security . This is a hands-on role for a practitioner who has built and deployed security controls , not just defined policy. You will enable teams to safely use AI by creating enforcement layers, identity controls, and detection capabilities that constrain and monitor AI-driven activity. What You’ll Do: Agentic AI Safeguards Architect and implement guardrails for tool-using AI systems , including: Tool access controls and allowlists Context and memory isolation Step-level validation of agent actions Apply mitigations aligned to the OWASP Agentic AI Top 10 (e.g., prompt injection, unsafe tool use, data leakage, excessive autonomy) Runtime Security Controls Build enforcement mechanisms that govern AI behavior at execution time: Interceptors, proxies, or middleware for tool/API calls Policy decision and enforcement layers Rate limits, execution bounds, and kill-switches Prevent unsafe or unauthorized actions initiated by AI systems Non-Human Identity (NHI) Design and implement identity and access controls for agents and automation , including: Short-lived credentials and scoped permissions Clear separation between human and non-human access Strong binding of identity to task context and execution Ensure all AI actions are attributable and auditable Observability & Detection Implement logging and tracing for AI activity : Prompts, tool usage, and decision flows Build detection capabilities using: Behavioral baselining and anomaly detection techniques Identify and alert on: Abnormal tool usage Suspicious prompt patterns Unexpected data access Threat Modeling (MAESTRO) Perform agentic system threat modeling using MAESTRO , including: Mapping agent capabilities, trust boundaries, and attack paths Modeling misuse and adversarial scenarios Translate findings into practical safeguards and detection logic Developer Safeguards Protect developers using AI tools by: Preventing sensitive data exposure Validating AI-generated code and actions Constraining unsafe automation Enable safe usage of AI-assisted development tools (e.g., Claude Code, Codex, Cursor ) with: Security validation layers Controlled prompting and output handling patterns The Right Fit: 7+ years in security engineering or backend systems Proven experience designing and deploying security controls , such as: Runtime enforcement layers (proxies, middleware, policy engines) Identity and access systems, especially for non-human entities Strong programming skills (Python preferred; Go, Java, or TypeScript a plus) Experience using AI-assisted development tools such as Claude Code in real workflows, including understanding associated security risks and safeguards Experience with: Logging, monitoring, and detection systems Building or securing API/service interactions Practical familiarity with: Agentic AI systems or tool-integrated LLM workflows OWASP guidance for AI/agent risks Practitioner Knowledge Experience applying (not just referencing): OWASP Agentic AI / LLM risk guidance NIST AI RMF concepts in real systems CSA guidance on workload and machine identity Strong understanding of: Zero Trust for non-human identities Secrets management and credential scoping Observability tooling (e.g., OpenTelemetry, ELK) Bonus Points For: Experience securing internal AI platforms or developer-facing AI tools Background in detection engineering, threat hunting, or adversarial testing Familiarity with agent frameworks (e.g., LangChain, LlamaIndex) Experience mentoring engineers and guiding secure design At this point, we hope you're feeling excited about the job description you're reading. Even if you don't meet every requirement, we still encourage you to apply. Learning, developing, and growing are key parts of our culture. We're eager to meet people who believe in our mission and can contribute to our team in various ways. We want people to feel comfortable expressing their true selves and to come, stay, and do their best work here. At Backblaze, we value being fair and good to our customers, partners, and employees. That’s why diversity, equity, and inclusion are at the core of our values. We are committed to fostering a workforce where all employees feel a sense of belonging regardless of race, ethnicity, nationality, gender, sexual orientation, age, religion, socio-economic status, ability, veteran status, and education. We believe that our dedication to cultivating a diverse workspace not only allows us to better serve our customers in over 175 countries, but further reinforces our commitment to doing the right thing. We are proud to be an Equal Opportunity Employer. To understand more about the data we collect and process as part of your application, please view our Backblaze Employee Privacy Notice. #LATAM

Location: San Francisco, California; New York, New York Workplace: Hybrid WHO WE ARE Notion is the collaborative AI workspace where teams and agents think together https://www.youtube.com/watch?v=vkpYpWfEK5s. We're building one place where your knowledge, projects, meetings, and AI tools live side by side, so work is faster, clearer, and less fragmented. Millions of individuals, small teams, and large companies run their work on Notion. Notinos (our employees) are customer zero in bringing this future of work to life. We care about craft, building things that last, and the belief that great work is still fundamentally human. Our goal isn’t to ship the next feature. Each and every team of Notinos is working to set the standard for how humans work together in the AI era. From building a business’s system of record to making and managing AI agents to automating away the busy work, we care deeply about giving our customers more time for their life’s work. ABOUT US: Notion helps you build beautiful tools for your life’s work. In today's world of endless apps and tabs, Notion provides one place for teams to get everything done, seamlessly connecting docs, notes, projects, calendar, and email—with AI built in to find answers and automate work. Millions of users, from individuals to large organizations like Toyota, Figma, and OpenAI, love Notion for its flexibility and choose it because it helps them save time and money. In-person collaboration is essential to Notion's culture. We require all team members to work from our offices on Mondays, Tuesdays, and Thursdays, our designated Anchor Days. Certain teams or positions may require additional in-office workdays. ABOUT THE ROLE: Millions of people rely on Notion to do their most important work. Protecting that trust starts with protecting the people who build Notion: our employees, their laptops, their identities, and the SaaS apps they rely on every day. We are looking for a hands-on Corporate Security Engineer to own and improve the technical controls that keep our workforce and corporate environment safe. This is a security engineering role focused on building scalable controls and automation across identity, endpoints, SaaS, and workforce infrastructure, not a traditional IT support or corporate engineering role. You'll own and evolve core security controls, design systems and automation that scale with the company, and help make security both stronger and easier to use. You'll partner closely with IT, Infrastructure, GRC, and Detection & Response to improve the security foundations that employees rely on every day. WHAT YOU'LL ACHIEVE: - Harden our identity and access management stack, including Okta and Google Workspace, with phishing-resistant MFA, strong SSO and SCIM lifecycles, and least-privilege access across SaaS. - Run our endpoint security program across a macOS-first fleet, including MDM, EDR, and configuration baselines, with working coverage for Windows and ChromeOS. - Secure AI tool usage at the endpoint, including governance of large language models, AI agents, and model context protocol (MCP) integrations; detect and prevent unauthorized or risky AI service access and data exfiltration through AI-enabled tools. - Reduce SaaS risk at scale through SSPM tooling and custom automation, including detection of risky OAuth grants, excessive permissions, shadow IT, and configuration drift. - Write code (Python, Terraform) to automate access reviews, onboarding and offboarding, configuration drift detection, and audit evidence collection. - Partner with Detection & Response to ensure corporate systems produce the telemetry needed to detect identity, endpoint, and SaaS abuse. - Support SOC 2, ISO 27001, and customer audits as a byproduct of good engineering, not a separate workstream. - Partner with Detection & Response on investigation and response for corporate security incidents, including phishing, account compromise, lost devices, and BEC. SKILLS YOU NEED TO BRING: - Have 5+ years of hands-on experience in corporate security, enterprise security, or IT security engineering at a cloud-native company. - Have working knowledge of a major identity provider (Okta, Entra, or Google Workspace) and the underlying protocols (SAML, OIDC, OAuth 2.0, SCIM). - Have hands-on experience operating endpoint management and detection tooling across macOS and enterprise environments. - Write production-quality scripts and automation in Python or Bash, and have shipped Terraform or other infrastructure-as-code for security configuration. - Are familiar with SaaS security risks (OAuth governance, audit logging, SSPM) and the realities of integrating a long tail of vendors. - Have working knowledge of at least one major cloud platform (AWS, GCP, or Azure) at the security configuration level. - Communicate clearly in writing and work effectively across IT, Engineering, Legal, People, and GRC. NICE TO HAVES: - Experience at a fast-growing tech or AI company where the security program had to outpace headcount. - A background in IT engineering, SRE, or production engineering that transitioned into security engineering. - Experience building internal security tooling or workflows that improved employee or developer experience. - Contributions to the security community through open-source tools, blog posts, or conference talks. We hire talented and passionate people from a variety of backgrounds because we want our global employee base to represent the wide diversity of our customers. If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply. If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know. Notion is committed to providing highly competitive cash compensation, equity, and benefits. The compensation offered for this role will be based on multiple factors such as location, the role’s scope and complexity, and the candidate’s experience and expertise, and may vary from the range provided below. For roles based in San Francisco or New York City, the estimated base salary range for this role is $200,000 - $220,000 per year. By clicking “Submit Application”, I understand and agree that Notion and its affiliates and subsidiaries will collect and process my information in accordance with Notion’s Global Recruiting Privacy Policy https://notion.notion.site/Notion-Global-Recruiting-Privacy-Policy-fc3eb4e829354a26a2bb6fd5e289b550?pvs=74 and NYLL 144 https://notion.notion.site/Ashby-AI-Bias-Audit-2b0efdeead05803bbbfae159ec86c528. #LI-Onsite A NOTE ON AI You don’t need deep AI expertise for every role, but we do expect every Notino to be intellectually curious, drawn to tinkering and discovery, and excited to use AI as a real collaborator in their work. For some roles, AI fluency is a core requirement — when that’s the case, we'll say so explicitly in the qualifications. People who thrive here don’t treat AI as a novelty. They use it to think better, and make their work easier for others to build on. EQUAL OPPORTUNITY & ACCOMMODATIONS We hire talented people from a wide range of backgrounds. If you’re excited about this role but don’t meet every bullet, we still encourage you to apply. Notion is an equal opportunity employer and does not discriminate on the basis of any legally protected characteristic. Consistent with applicable law, we will consider for employment qualified applicants with arrest and conviction records. Notion provides reasonable accommodations during the application process; if you need one, please let your recruiter know. Notion is proud to be an equal opportunity employer. We do not discriminate in hiring or any employment decision based on race, color, religion, national origin, age, sex (including pregnancy, childbirth, or related medical conditions), marital status, ancestry, physical or mental disability, genetic information, veteran status, gender identity or expression, sexual orientation, or other applicable legally protected characteristic. Notion considers qualified applicants with criminal histories, consistent with applicable federal, state and local law. Notion is also committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, please let your recruiter know.